# Service Catalog

These Docker service roles are available through `nbops_roles`.

Media and downloads:

- `jellyfin`
- `jellyseerr`
- `qbittorrent`
- `transmission`
- `wizarr`
- `flaresolverr`
- `cleanuparr`
- `pinchflat`
- `kavita`

Identity and access:

- `authentik`
- `authentik_ldap`
- `authentik_proxy`
- `authentik_rac`
- `vaultwarden`

Dashboards and file tools:

- `homarr`
- `nginx_content`
- `code_server`
- `filebrowser_quantum`
- `kiwix_serve`
- `requarks`
- `fiveetools`
- `ntfy`

Infrastructure:

- `pelican_panel`
- `pelican_server`
- `gitea`
- `gitea_act_runner`
- `postgres`
- `php_fpm`
- `valkey`
- `syncthing`
- `ipv6nat`

Monitoring:

- `grafana`
- `loki`
- `alloy`
- `grafana_renderer`
- `prometheus`
- `uptime_kuma`

Most roles use the shared `docker_app` implementation and support:

- `host` routing mode: publish ports directly and open UFW rules.
- `traefik` routing mode: attach to the proxy network and render Traefik labels.

Override role defaults in `host_vars` or `group_vars`; do not edit generated
Compose files on the VM.